This statement explains how I collect, holds, use and protect your data and information about you under General Data Protection Regulations (GDPR).

 

What data do I collect and hold?

I collect your personal data such as name, date of birth, address, telephone number and email address (optional) and emergency contact details. I collect personal data from you and any third parties acting on your behalf (such as insurers, solicitors, etc). I also collect special information about your healthcare, and any information relevant to your psychological healthcare. This may include financial information when making payments. 

 

What do I use this information for?

I use this personal information for the purposes of the provision of psychological assessment and treatment services to you. It may also be necessary to use the information to assist in managing complaints or litigation relevant to the services that I provide to you. Anonymised data may also be used for audit purposes, to monitor and market the clinical effectiveness of the service.

 

Who do I share your information with?

I may share information with other healthcare professionals involved in your care. Where relevant I may also share information with insurers or others paying for the service that I provide to you. In some cases this may be your employer or solicitor. I may also share your information with others who I ask to become involved in providing a service as part of the services that I provide to you. In some situations I may be legally required to share information. If I do share your information, I will make sure that the appropriate data protection standards are complied with. 

 

How do I protect your data?

I ensure that any data that I store is held securely on password protected computers, stored in locked filing cabinets and/or stored securely on a cloud-based client management system. I ensure that email attachments with any clinically sensitive information are password protected.

 

What are my rights?

Under General Data Protection regulation (2018) you have the right to request a copy of the data I hold about you, to rectify anything that is incorrect, to request deletion of your data, or to withdraw your consent at any time. 

 

How do I contact you? 

If you have any queries with regards to data protection or data storage issues, or if you wish to withdraw your consent at any time, please contact:  Dr Liz White, 41a Baldock Street, Ware, Hertfordshire, SG12 9DH, liz@drlizwhite.co.uk

 

Consent

I collect your data in order to provide psychological treatment. To do this I need to seek your specific permission to do so.

• The data I will be collecting and processing & the reason for collecting it - I will only collect the data that is necessary for the treatment provided, in order to provide psychological assessment and treatment to you

• Where and how the data will be held & for how long - The data is kept securely on password protected computers, I also use a cloud-based client management system, or, if in paper format, in locked filing cabinets. I will only keep the data for as long as is necessary to provide the treatment and to deal with any issues arising from this. Normally this would be for no longer than seven years, after which it would be deleted or destroyed securely.

• Who the information will be shared with - Your personal data is confidential, and will not be shared with anyone unless necessary for the course of your treatment. In the normal course of treatment I would share information with your GP. Before sharing your information with anyone else I would always seek your explicit permission to do so, unless there is a risk of harm to you or someone else if the information was not shared. Where possible this will first be discussed with you.